I had a very similar experience just over a year ago. My phone was also the vector of the attack. It sounds like you’re getting things figured out and locked down, but if you want to talk through it, don’t hesitate to reach out.